[Sorry about the non-operational content] I complained at SkyInet.net about two hours ago - they were very responsive and said they'd pull the offending files immediately. They seem to have done so. If anyone wants removal instructions, LMK. Also, if anyone wants a copy of the .exe for analysis, I have one. Cheers, Phil Sykes, Network Engineer Cable & Wireless Europe p: +49 89 92699 204 m: +49 172 89 79 727

-----Original Message----- From: Simon Lockhart [mailto:simonl@rd.bbc.co.uk] Sent: 04 May 2000 12:18 To: nanog@merit.edu Subject: Virus heads-up

Heads up on a new virus - ILOVEYOU

I'm sure you've heard about it already, but you may wish to block www.skyinet.net (206.101.197.226) at your borders, as that is where it fetches part of the actual virus code from:

132.185.x.y - - [04/May/2000:10:23:14 +0100] "GET http://www.skyinet.net/~y oung1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf7679n jbvYT/WIN-BUG SFIX.exe HTTP/1.0"

Other than that, it looks like just another Melissa.

Simon -- Simon Lockhart | Tel: +44 (0)1737 839676 Internet Engineering Manager | Fax: +44 (0)1737 839516 BBC Internet Services | Email: Simon.Lockhart@bbc.co.uk Kingswood Warren,Tadworth,Surrey,UK | URL: http://support.bbc.co.uk/